Need help identifying a subnet

Hosting
1

Hello guys, I’d like to ask you a question.
How can you determine something about the server just from seeing the subnet?
Etc.: 94.249.100.93/32
How many IP adresses can this subnet have ?
What else can you tell about it ?
Any help appreciated,
V

2

Hi,

  • The /32 give 30 hosts + 1 bcast + 1 net base; basically 30 usable IP addresses in this subnet.
  • It is an IPV4 address
  • Using nslookup reverse dns finds: 4.249.100.93 is from Jordan(JO) in region Middle East
  • The subnet belongs to go.com.jo
  • Public DNS does not seem to be setup for this
  • The hops are : TraceRoute from Network-Tools.com to 94.249.100.93 [94.249.x.93.go.com.jo]
    [TABLE=“width: 100%”]
    [TR]
    [TD=“width: 22, align: right”]Hop[/TD]
    [TD=“width: 65, align: right”]B[/B][/TD]
    [TD=“width: 65, align: right”]B[/B][/TD]
    [TD=“width: 65, align: right”]B[/B][/TD]
    [TD=“width: 4”][/TD]
    [TD=“width: 130”] IP Address[/TD]
    [TD]Host name[/TD]
    [/TR]
    [/TABLE]
    [TABLE=“width: 100%”]
    [TR]
    [TD=“width: 22, align: right”]1 [/TD]
    [TD=“width: 65, align: right”] 0 [/TD]
    [TD=“width: 65, align: right”] 0 [/TD]
    [TD=“width: 65, align: right”] 0 [/TD]
    [TD=“width: 130”] 8.9.232.73[/TD]
    [TD] xe-5-3-0.edge3.dallas1.level3.net [/TD]
    [/TR]
    [/TABLE]
    [TABLE=“width: 100%”]
    [TR]
    [TD=“width: 22, align: right”]2 [/TD]
    [TD=“width: 65, align: right”] 0 [/TD]
    [TD=“width: 65, align: right”] 0 [/TD]
    [TD=“width: 65, align: right”] 0 [/TD]
    [TD=“width: 130”] 4.69.145.6[/TD]
    [TD] ae-14-60.car4.dallas1.level3.net [/TD]
    [/TR]
    [/TABLE]
    [TABLE=“width: 100%”]
    [TR]
    [TD=“width: 22, align: right”]3 [/TD]
    [TD=“width: 65, align: right”] 7 [/TD]
    [TD=“width: 65, align: right”] 7 [/TD]
    [TD=“width: 65, align: right”] 0 [/TD]
    [TD=“width: 130”] 4.68.110.202[/TD]
    [TD] francetelecom-level3-te.dallas1.level3.net
    [/TD]
    [/TR]
    [/TABLE]
  • Here is the spam blacklist info: whois.rfc-ignorant.org has not blacklisted this IP
    bl.spamcop.net has not blacklisted this IP
    sbl.spamhaus.org has not blacklisted this IP
    xbl.spamhaus.org has not blacklisted this IP
    zen.spamhaus.org has blacklisted this IP and the response is 127.0.0.11
    psbl.surriel.com has not blacklisted this IP


Whois: 94.249.100.93…

Results returned from whois.arin.net:


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#




#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=94.249.100.93?showDetails=true&showARIN=false&ext=netref2
#


NetRange:       94.0.0.0 - 94.255.255.255
CIDR:           94.0.0.0/8
OriginAS:       
NetName:        94-RIPE
NetHandle:      NET-94-0-0-0-1
Parent:         
NetType:        Allocated to RIPE NCC
Comment:        These addresses have been further assigned to users in
Comment:        the RIPE NCC region. Contact information can be found in
Comment:        the RIPE database at http://www.ripe.net/whois
RegDate:        2007-07-30
Updated:        2009-05-18
Ref:            http://whois.arin.net/rest/net/NET-94-0-0-0-1


OrgName:        RIPE Network Coordination Centre
OrgId:          RIPE
Address:        P.O. Box 10096
City:           Amsterdam
StateProv:      
PostalCode:     1001EB
Country:        NL
RegDate:        
Updated:        2011-09-24
Ref:            http://whois.arin.net/rest/org/RIPE


ReferralServer: whois://whois.ripe.net:43


OrgTechHandle: RNO29-ARIN
OrgTechName:   RIPE NCC Operations
OrgTechPhone:  +31 20 535 4444 
OrgTechEmail:  [email]ncc@ripe.net[/email]
OrgTechRef:    http://whois.arin.net/rest/poc/RNO29-ARIN


OrgAbuseHandle: RNO29-ARIN
OrgAbuseName:   RIPE NCC Operations
OrgAbusePhone:  +31 20 535 4444 
OrgAbuseEmail:  [email]ncc@ripe.net[/email]
OrgAbuseRef:    http://whois.arin.net/rest/poc/RNO29-ARIN




#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

Results returned from whois.ripe.net:

% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf


%ERROR:201: access denied for 67.222.132.205
%
% Sorry, access from your host has been permanently
% denied because of a repeated excessive querying.
% For more information, see
% http://www.ripe.net/data-tools/db/faq/faq-db/why-did-you-receive-the-error-201-access-denied


% This query was served by the RIPE Database Query Service version 1.66.3 (WHOIS3)

Get to know your networking tools like nslookup, whois, and tracert.

I hope this helps

Regards,
Steve

3

Hello,
I thought that /32 stands for subnet mask 255.255.255.255 and thus it can only hold 1 host and have only one IP - 94.249.100.93 itself.
Are you sure there are 30 usable IP’s ?

4

/27 gives you 32 Ip address not /32./32 only gives you 1 IP address.You can check below sheet for the IP range :
notation resulting subnet
netmask shorthand number of addresses
255.255.255.0 /24 [8-bit] 28 = 256 = 254 hosts + 1 bcast + 1 net base
255.255.255.128 /25 [7-bit] 27 = 128 = 126 hosts + 1 bcast + 1 net base
255.255.255.192 /26 [6-bit] 26 = 64 = 62 hosts + 1 bcast + 1 net base
255.255.255.224 /27 [5-bit] 25 = 32 = 30 hosts + 1 bcast + 1 net base
255.255.255.240 /28 [4-bit] 24 = 16 = 14 hosts + 1 bcast + 1 net base
255.255.255.248 /29 [3-bit] 23 = 8 = 6 hosts + 1 bcast + 1 net base
255.255.255.252 /30 [2-bit] 22 = 4 = 2 hosts + 1 bcast + 1 net base
255.255.255.254 /31 [1-bit] 21 = - invalid (no possible hosts)
255.255.255.255 /32 [0-bit] 20 = 1 a host route (odd duck case)

5

Thanks, was really helpful.
V